CVE-2022-26009

creationtimestamp| type| source ---|---|--- 2022-08-06 02:27:10+00:00| seen| https://t.me/cibsecurity/47685...

CVE-2022-26009

A stack-based buffer overflow vulnerability exists in the confsrv ucloudsetnodelocation functionality of TCL LinkHub Mesh Wi-Fi MS1G0001.0014. A specially-crafted network packet can lead to stack-based buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

CVE-2022-26009

TALOS-2022-1483 documents CVE-2022-26009 affecting TCL LinkHub Mesh Wi‑Fi MS1G_00_01.00_14. The vulnerability is a stack-based buffer overflow in confsrv ucloud_set_node_location. During processing of a NodeLocation protobuf, the code performs an inbound sprintf without validating destination buf...